Russia

1993-04-17

Russia

Dmitry Yureyvich KHOROSHEV is or has been involved in relevant cyber activity in that he has been responsible for, engaged in, provided support for or promoted the commission, planning or preparation of relevant cyber activity, or provided technical assistance that could contribute to relevant cyber activity. In particular, KHOROSHEV has been the primary user of the online moniker and public facing identity LockBitSupp. We assess that KHOROSHEV is a senior leader of the LockBit ransomware group and was centrally involved in the administration, its infrastructure and operations. KHOROSHEV, has been a significant direct financial beneficiary of LockBit ransomware activity. LockBit are responsible for ransomware attacks against thousands of victims around the world, including in the UK, which have been estimated to result in billions of dollars of losses globally, impacting businesses and the livelihoods of ordinary citizens. LockBit has conducted or enabled malicious ransomware campaigns against a range of targets, involving actual or attempted unauthorised access to and interference with information systems and data, activities which undermined or were intended to undermine the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, or directly or indirectly caused or were intended to cause economic loss to or prejudice to the commercial interests of those affected by the activity.

The Director Disqualification Sanction was imposed on 09/04/2025.

2024-05-07

UK

The Cyber (Sanctions) (EU Exit) Regulations 2020

UK horizontal

Cyber

Asset freeze and making available provisions, Travel bans

• The Regulations impose financial sanctions through a targeted asset freeze on designated persons and prohibitions on making funds or economic resources available. This involves the freezing of funds and economic resources (non-monetary assets, such as property or vehicles) of designated persons and ensuring that funds and economic resources are not made available to or for the benefit of designated persons, either directly or indirectly. • The effect of the Regulations is to impose a travel ban on persons who are designated by the Secretary of State for the purposes of being made subject to immigration sanctions under the Sanctions Act.

The Cyber (Sanctions) (EU Exit) Regulations 2020 came fully into force on 31 December 2020. They put in place sanctions measures aimed at furthering the prevention of cyber activity which: • undermines, or is intended to undermine, the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom • directly or indirectly causes, or is intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity • undermines, or is intended to undermine, the independence or effective functioning of an international organisation, or a non-governmental organisation or forum whose mandate or purposes relate to the governance of international sport or the internet • otherwise affects a significant number of persons in an indiscriminate manner You should also review the Sanctions (EU Exit) (Miscellaneous Amendments) (No. 4) Regulations 2020 to find out any amendments made to the Regulations. These regulations have replaced, with substantially the same effect, relevant existing EU legislation and related UK regulations.

Licensing and exception provisions are contained in Part 5 of the Regulations.